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DETAILED ACTION 

1. This application has been examined. Claims 1-8 are pending. 



Priority 

2. Acknowledgment is made of applicant's claim for foreign 
priority based on an application filed in Canada on 03/01/2000. 
It is noted, however, that applicant has not filed a certified 
copy of the application as required by 35 U.S.C. 119(b) . 



Double Patenting 

3. The nonstatutory double patenting rejection is based on a 
judicially created doctrine grounded in public policy (a policy 
reflected in the statute) so as to prevent the unjustified or 
improper timewise extension of the "right to exclude" granted by 
a patent and to prevent possible harassment by multiple 
assignees. See In re Goodman, 11 F.3d 1046 , 29 USPQ2d 2010 
(Fed. Cir. 1993); In re Longi, 759 F.2d 887, 225 USPQ 645 (Fed. 
Cir. 1985); In re Van Ornum, 686 F.2d 937, 214 USPQ 761 (CCPA 
1982); In re Vogel, 422 F.2d 438, 164 USPQ 619 (CCPA 1970) ;and, 
In re Thorington, 418 F.2d 528, 163 USPQ 644 (CCPA 1969). 

A timely filed terminal disclaimer in compliance with 37 
CFR 1.321(c) may be used to overcome an actual or provisional 
rejection based on a nonstatutory double patenting ground 
provided the conflicting application or patent is shown to be 
commonly owned with this application. See 37 CFR 1.130(b). 

Effective January 1, 1994, a registered attorney or agent 
of record may sign a terminal disclaimer. A terminal disclaimer 
signed by the assignee must fully comply with 37 CFR 3.73(b) . 

4. Claims 1-8 are provisionally rejected under the judicially 
created doctrine of obviousness- type double patenting as being 



unpatentable over claims 1-10 of copending Application No. 
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09/926439 and further in view of Motoyama et al . (U.S. Patent 
Number 6,581,092) hereinafter referred to as Motoyama . 

Although the conflicting claims are not identical, they are 
not patentably distinct from each other because the only 
difference between the two pending applications is a minor 
wording variation, and the functional limitation of "an 
administration server" which was commonly implemented in 
providing a controlled access to resources. 



Claimed Invention SN: 09/926,438 



Column -pending Application SN: 09/926,439 



Claim 1: 



Claim 1: 



1 . a resource registry including resource records — 
associated with the network resources, the 
resource records defining at least a user access 
level for each said network resource; 

2. an authorization server in communication witl 
the resource registry for controlling network 
access to the network resources by the network 
terminals in accordance with the resource 
records; and 

3. an administration server in communication with 
the resource registry for providing controlled 
access to the resource records. 




2. 
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a resource registry including resource records 
associated with the network resources, the 
resource records defining at least a resource 
type for each said network resource; 

a driver database including resource driver 
applications for the network resources; and 

an authorization server for facilitating 
communication between the network terminals 
and the network resources, the authorization 
server being in communication with the resource 
registry and the driver database for providing the 
driver applications to the network terminals in 
^accordance with the resource records. 



Fractional limitations of Applicant's 
Fie. 1 directed to the Claims disclosed 
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2. The network resource control system according to claim 
1 , wherein the resource records define at least resource -fc 
configuration data for each said network resource, and 
each said network terminal has an associated terminal 
configuration, and the authorization server is configured to 
receive from one of the network terminals a request for 
access to one of the network resources, and to configure 
the one terminal for communication with the one network 
resource in accordance with a correspondence between 
the terminal configuration of the one network terminal and 
the resource configuration data and the user access control 
data associated with the one network resource. 



2. The network resource access system according to claim 
1 , wherein each said network terminal has an associated 
terminal configuration, and the resource records include a 
user access level, and the authorization server is 
configured to receive from one of the network terminals a 
request to communicate with one of the network resources, 
to provide the one network terminal with the network driver 
application associated with the one network resource in 
accordance with a correspondence between the terminal 
configuration of the one network terminal and the user 
access level associated with the one network resource. 
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3. The network resource control system according to claim 
2, wherein the authorization server is configured to provide 

the one terminal with a network resource driver for ^ 

communication with the one network resource in ^ 
accordance with the correspondence. 


3. The network resource access system according to claim 
2, wherein the resource records define a network address 
associated with each said network resource, and the 
authorization server is configured to configure the 
associated driver application with the respective network 
address. 


4. wherein the resource records are configured for access 
by respective administrators of the network resources, and 
the administration server is configured to receive from one 
of the network administrators a request for access to one of 
the resource records with user access control data, to 
verify authorization for the access from the access 
configuration associated with the one resource record, and 
to update the one resource record with the user access 
control data in accordance with the verification. 


4. The network resource access system according to claim 
3, wherein the authorization server is configured to 
establish a secure communications channel with the one 
network terminal, and to provide the associated driver 
application with the respective network address over the 
secure communications channel. 


5. providing a resource registry including resource records 
associated with the network resources; receiving user ^ 
access control data from administrators of the network 
resources for incorporation into the resource records; and 
in accordance with the user access control data, 
configuring the network terminals for communication with 
the network resources. 


5. obtaining resource configuration data associated with 
the one network resource; and facilitating communication 
between the one network terminal and the one network 
resource in accordance with a correspondence between 
the resource configuration data and user configuration data 
associated with the one network terminal. 


6. The method according to claim 5, wherein the resource 
records define at least resource configuration data for each 
said network resource, and each said network terminal has 
an associated terminal configuration, and the terminal 
configuring step comprises the steps of receiving from one 
of the network terminals a request for access to one of the 
network resources, and configuring the one terminal for 
communication with the one network resource in 
accordance with a correspondence between the terminal 
configuration of the one network terminal and the resource 
configuration data and the user access control data 
associated wjin ine one neiworK resource. 


6. The method according to claim 5, wherein the 
communication facilitating step comprises providing the 
one network terminal with a network driver application for 
communication with the one network resource in 

/ 


7. The method according to claim 6, wherein the step of / 
configuring the one terminal comprises providing the one / 
terminal with a network resource driver for communication j 
with the one network resource in accordance with the 
correspondence. 


7. The method according to claim 6, wherein the resource 
configuration data includes a network address associated 
with the one network resource, and the communication 
facilitating step comprises configuring the network driver 
application with the network address. 


8. The method according to claim 5, wherein each said 
resource record is configured for access by one of the 
network administrators, and the control data receiving step 
comprises the steps of receiving from one of the network 
administrators a request for access to one of the resource 
records, verifying authorization for the access from the 
access configuration associated with the one resource 
record, and updating the one resource record in — 
accordance with the verification. 1 


8. The method according to claim 7, wherein the 
communication facilitating step comprises the steps of 
establishing a secure communications channel with the 
one network terminal, and providing the driver application 
with the network address over the secure communications 
channel. 

^10. The method according to claim 5, wherein the step of 
obtaining resource configuration data comprises the steps 



Application/Control Number: 09/926,438 Page 5 

Art Unit: 2144 





of receiving from a network administrator of the one 
network resource the resource configuration data together 
with a request to provide the resource configuration data, 
verifying authorization to provide the configuration data, 
and storing the received configuration data in accordance 
with the verification. 




9. The method according to claim 6, wherein each said 
network terminal has an associated terminal configuration, 
and the resource configuration data includes a user access 
level, and the communication facilitating step comprises 
providing the network driver application in accordance with 
a correspondence between the terminal configuration of 
the one network terminal and the user access level 
associated with the one network resource. 



For example, as evidenced by the teachings of Motoyama , use 
of administration server in controlling a record of a network 
resource was well known in the art at the time of the invention. 
See Figures 1, 5, 11 & 31-34, Column 3 Lines 31-37, Column 14 
Lines 14-65. Thus, it would have been obvious to one of ordinary 
skill in the art at the time of the invention to take the 
teachings of Motoyama related to resource administrator and have 
modified the disclosed invention in order to better manage the 
usage of the network resources. 



This is a provisional obviousness -type double patenting 
rejection because the conflicting claims have not in fact been 
patented. 
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Claim Rejections - 35 USC § 102 

5. The following is a quotation of the appropriate paragraphs 
of 35 U.S.C. 102 that form the basis for the rejections under 
this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published 
under section 122 (b) , by another filed in the United States before the 
invention by the applicant for patent or (2) a patent granted on an 
application for patent by another filed in the United States before the 
invention by the applicant for patent, except that an international 
application filed under the treaty defined in section 351(a) shall have the 
effects for purposes of this subsection of an application filed in the 
United States only if the international application designated the United 
States and was published under Article 21(2) of such treaty in the English 
language . 

6. Claims 1-8 are rejected under 35 U.S.C. 102(e) as being 
anticipated by Grantges (U.S. Patent Number 6,324,648). 

As per claim 1: a resource registry including resource 
records associated with the network resources, the resource 
records defining at least a user access level for each said 
network resource; (See Figures 1, 6 & 7, Column 7 Line 3 8 through 
Column 8 Line 14 : Grantges disclosed resource and users 
information registry (authorization server, information security 
and certificate authority) , an authorization server in 
communication with the resource registry for controlling network 
access to the network resources by the network terminals in 



accordance with the resource records; and an administration 
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server in communication with the resource registry for providing 
controlled access to the resource records. (See Figures 1, 6 & 7, 
Column 7 Lines 28-62 and Column 9 Lines 9-14 : Grantges disclosed 
an Authorization server establishing a communication between a 
user using a client network and a network resource according to 
the resource information record describing the client network and 
the resource network and further having therein an administration 
interface providing controlled access between the client terminal 
and the network resources) . 

As per claims 2, 3, 6 and 7: wherein the resource records 
define at least resource configuration data for each said network 
resource, and each said network terminal has an associated 
terminal configuration, (Since the teachings of Grantges did 
teach a client terminal been authenticated to have access to the 
resources located in a secured enterprise network, the network 
terminal and the network resource to have a configuration file 
was inherently disclosed) and the authorization server is 
configured to receive from one of the network terminals a request 
for access to one of the network resources, (See Column 7 Lines 
49-58: Grantges disclosed multiple access levels and where the 
authorization server receiving access request from the client 
terminal and providing access according to the access level of a 
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specific terminal requesting access to the network resources) and 
to configure the one terminal for communication with the one 
network resource in accordance with a correspondence between the 
terminal configuration of the one network terminal and the 
resource configuration data and the user access control data 
associated with the one network resource. (See Column 7 Lines 49- 
58, Column 8 Lines 53-65 and Column 9 Lines 9-30) . 

As per claim 5: providing a resource registry including 
resource records associated with the network resources; (See 
Figures 1, 6 & 7, Column 7 Line 3 8 through Column 8 Line 14: 
Grantges disclosed a configuration information of the network 
resources and users information registry (authorization server, 
information security and certificate authority) , receiving user 
access control data from administrators of the network resources 
for incorporation into the resource records; and in accordance 
with the user access control data, configuring the network 
terminals for communication with the network resources. (See 
Figures 1, 6 & 7, Column 7 Lines 28-62 and Column 9 Lines 9-14: 
Grantges disclosed an Authorization server establishing a 
communication between a user using a client network and a network 
resource according to the resource information record describing 
the client network and the resource network and further having 
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therein an administration interface providing controlled access 
between the client terminal and the network resources) . 

As per claims 4 and 8: wherein each said resource record is 
configured for access by one of the network administrators, and 
the control data receiving step comprises the steps of receiving 
from one of the network administrators a request for access to 
one of the resource records, verifying authorization for the 
access from the access configuration associated with the one 
resource record, and updating the one resource record in 
accordance with the verification. (See Column 7 Lines 49-62, 
Grantges disclosed an access control where the network 
administrators were given an "admin" access in executing 
different functionalities of the resources with multiple 
administration access levels with the privilege for updating the 
resource records in the resource registry configuration of both 
the clients and the resources in the network) . 

Conclusion 

7. The prior art made of record (Form PTO-892) and not relied 
upon is considered pertinent to Applicant's disclosure. 

8. Any inquiry concerning this communication or earlier 
communication from the examiner should be directed to Yemane 
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Gerezgiher whose telephone number is (571) 272-3927. The 
examiner can normally be reached on Monday- Friday from 9:00 AM 
to 6:00 PM. 

If attempts to reach the examiner by telephone are 
unsuccessful. The examiner's supervisor, William Cuchlinski, 
can be reached at (571) 272-3925. 



Patent Examiner 
AU: 2144 
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